MAL-2025-157494 Malicious code in kentung-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e616034e8cefa4588e5ccf3f0576b1322afe85084036f6f61b6d620b1ae5021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151141 Malicious code in abel-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a56abb9872a865ab1e8480e99752121ca78dd1a61e2ea87e6b4b6cfc5d06ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152566 Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167941 Malicious code in teagood-yakuna79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d7c1c1ea7198e78e043073b0e27a98fd87062601c2c496e0f5817ca8e7aa14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167808 Malicious code in teagood-sukuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a2dea10637367ed2139dd37d4d782010e6ad8cca6c515db05dd8c938ff0139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163979 Malicious code in parwo-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77e2263b52af4ad1bf8924e1894d7d215859358b4d44bff778084ff0cf6b4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169239 Malicious code in trevora-cir44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfdfa39c5c2dbdb9d5ce4abf4e9eabf77275cfcc177607183c192635b55a9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164425 Malicious code in polymedr-mindatas-buipenaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098d8b15a49fe16b9f696a04ce0f99165d36b9d23c5753abab8acbed65fd7daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162315 Malicious code in nokire-akaza97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa31125c8aa316a6d3f853a2476cb5ea2b88b37b4d954dab8032b5df230cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162846 Malicious code in nokire-lokcek88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f06454e5651feacef0d7d3ee29997094edfc6673fd13442f066656553829e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158546 Malicious code in lookingan-namakiki36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e00eca1e4522671c3afa373f66f3c504e4157558aa9c592a53cec88e1546a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160820 Malicious code in muklis-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4737aa42377f8a77f936f9b639174e449d29eab5926e8a4de24e426f0a4ebf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-relay-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8df2c7171ca9261aad999cabc9cab7d7e3eb476ecbee2445af9054a0299af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-centaurus-scorpius-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3bcd92f5223ed3455308cd868500f9582e6abe1081bf9975ab41468d08a549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-bulma-polaris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692d8948eee5220a89db98305c0c5b8563d44e1e8f148eb621bcc3b1f6e1b915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-chromedriver-rehype-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06272d3b898195ececb72f425e69fabf48ad1d4613749198a43e9d6738efeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...